All products
notificationx
WordPress · Plugin13 reports
| Report | Product | Ecosystem | Severity | Fix status | Last updated |
| NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar < 3.3.7 - Missing AuthorizationCVE-2026-119303 |
notificationx |
WordPress |
Medium
|
Fix reported |
|
| NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar <= 3.3.6 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2026-119507 |
notificationx |
WordPress |
Medium
|
Fix reported |
|
| NotificationX <= 2.3.11 - Unauthenticated SQL InjectionCVE-2022-51021 |
notificationx |
WordPress |
High
|
Fix reported |
|
| NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST RouteCVE-2026-109513 |
notificationx |
WordPress |
High
|
Fix reported |
|
| NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST RouteCVE-2026-110721 |
notificationx |
WordPress |
Medium
|
Fix reported |
|
| NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar <= 3.2.1 - Missing AuthorizationCVE-2026-27042 |
notificationx |
WordPress |
Medium
|
Fix reported |
|
| NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics ResetCVE-2026-0554 |
notificationx |
WordPress |
Medium
|
Fix reported |
|
| NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'CVE-2025-15380 |
notificationx |
WordPress |
High
|
Fix reported |
|
| NotificationX <= 2.9.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-22683 |
notificationx |
WordPress |
Medium
|
Fix reported |
|
| NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-11727 |
notificationx |
WordPress |
Medium
|
Fix reported |
|
| NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL InjectionCVE-2024-1698 |
notificationx |
WordPress |
Critical
|
Fix reported |
|
| NotificationX <= 2.3.8 - Blind SQL InjectionCVE-2022-0349 |
notificationx |
WordPress |
Critical
|
Fix reported |
|
| NotificationX <= 1.8.2 - Cross-Site Request Forgery BypassCVE-2020-36744 |
notificationx |
WordPress |
Medium
|
Fix reported |
|